Client conversations that stay between you and your client.

Encrypted messaging and file transfer for firms where confidentiality is the engagement. The message content on our servers is ciphertext we cannot read — even when compelled.

No phone number Works over any channel On iPhone and Mac today
Your team on Mac · your client on iPhone · the same encrypted matter
Built on RSA-3072 AES-256-GCM 2 patents pending No readable client content on our servers iPhone + Mac, live today

The product

Everything a matter needs, in one encrypted place.

Talk to a client the way they already talk.

An ordinary messaging app to use, with a key that never leaves the device underneath it.

Every message sealed to its recipient.

A fresh key per message, so compromising one does not unlock the thread.

Nothing readable reaches us.

What lands on our servers is ciphertext. A court order produces exactly that.

An end-to-end encrypted conversation between a firm and its client
iPhone · encrypted thread

Security

If we could read your messages,
this would be a different company.

Your private key is generated on your device and never leaves it. We hold no key, which is not a policy we could quietly change — it is what the system is.

Message cipher
AES-256-GCM
Key exchange
RSA-3072 OAEP-SHA256
Private key
On device only
A legal request yields
Ciphertext, never content
Vendor backdoor
None
Self-hosting
Enterprise tier

We do keep the metadata needed to deliver a message — who it is for, when, and which conversation. We never sell it, and that is the whole list. If a vendor tells you they hold nothing at all, ask how the message gets delivered.

Try it here

This is what we can see.

Type anything on the left. The right-hand pane is what would reach our servers — encrypted in your browser with AES-256-GCM, the same cipher the app uses. Nothing you type here is sent anywhere.

What you write On your device

A message you would not want on a consumer messenger.

What we store Encrypted

        
Conversation
Recipient
Received

Plus this metadata, which we do keep in order to deliver the message. We never sell it. That is the whole list.

Why not Signal, or WhatsApp

Good products. Built for a different customer.

Consumer messengers optimise for reach. A firm needs the opposite properties.

 Consumer messengersTruCrypt
Reading message content Encrypted on the better ones — but the platform still holds the account and the graph. Your private key never leaves your device. We hold no key.
Identity A phone number ties the account to a person at registration. No phone number required.
Discoverability Anyone holding a number can find or message your client. No public directory. Clients siloed to their own matter.
A legal request to the vendor Yields whatever the platform holds, under their jurisdiction. Yields ciphertext and limited delivery metadata. Never content.
Professional duty Not designed around privilege or fiduciary duty. Built for them; designed to support NIS2, DORA and GDPR obligations.
Where it runs Their servers, their terms — which can change. Our infrastructure, or your own servers on the enterprise tier.

Pricing

Firm pricing is a conversation, not a checkout.

What a firm pays depends on how many people are in it and how many matters are open. We're setting that with a small number of founding practices rather than guessing at a number.

For firms Founding

Your own encrypted workspace, priced to your practice.

A fixed founding rate that doesn't move when we finish, and a direct line to the engineers building it.

  • Dedicated encrypted environment
  • Case-based access control
  • Staff Mac app, live today
  • Firm-held recovery for legal hold
  • Your firm absent from any directory
  • On-premise or private cloud option
  • Unlimited client access, at no cost to them

Tell us the shape of your practice — team size, matter volume, and what you're using today. We'll come back with a number and an honest read on whether it fits.

Request firm pricing

A reply within one business day, from an engineer.

Using TruCrypt on your own?

The app is free to download and the plan is chosen inside it, whenever you're ready. Nothing to arrange with us.

Not for your clients. A client you invite to a matter installs the same app for free and needs no plan of their own — these are for people using TruCrypt for themselves.

Individual
$59 / year

Encrypted messaging, files and private groups.

Download for iPhone
Creator
$299 / year

Adds stealth mode and invite-only rooms up to 30 people.

Download for iPhone

Download the app free, then choose a plan inside it whenever you're ready — the subscription is handled by Apple, not by us. Firm workspaces are not sold through the App Store.

Questions

Straight answers.

Can TruCrypt read our messages?

No. Message content is end-to-end encrypted with RSA-3072 and AES-256-GCM. Your private key is generated on your device and never leaves it, so we hold no key to decrypt anything. A court order, regulator or attacker can obtain ciphertext and limited delivery metadata — never readable content.

What runs on what today?

Both apps are live today: the iPhone app your clients use, and TruCrypt Staff on the Mac App Store for your team. A web console for administrators is still in development — we would rather say that plainly than sell you a roadmap as a product.

If we lose access, can anyone recover our records?

On the firm workspace tier, organisational recovery is held by your own administrators, so your firm can always recover its own records for continuity or legal hold. TruCrypt never can, on any tier.

Do you sell data or build advertising profiles?

No. We build no advertising or behavioural profiles. We keep the limited metadata needed to deliver messages, and we never sell it. Our only revenue is subscriptions.

Does this help with NIS2, DORA and GDPR?

TruCrypt's end-to-end encryption and data minimisation are designed to support obligations under those frameworks, and the enterprise tier lets you keep the infrastructure in your own jurisdiction. It is a control that supports compliance — not a certification, and we won't describe it as one.

Do our clients need to pay for anything?

No. The iPhone app is free to download, and a client you invite to a matter needs no subscription of their own — your firm's plan covers their access. The paid personal plans are for individuals using TruCrypt for themselves, not for your clients.

How long does it take to get a client onto it?

They install one app and accept an invitation. There is no account to create with your firm and nothing for them to configure. Most of the work is on your side, and it is measured in minutes per matter.

Who builds it

People who have shipped security software before.

Sebastian Krakowski

Sebastian Krakowski

General Manager

Serial entrepreneur with 15+ years in IT and cybersecurity and multiple exits. Leads strategy, operations and go-to-market.

Michal Galeziowski

Michal Galeziowski

CTO

Senior engineer with 10+ years building and scaling production systems. Architects the encryption infrastructure and platform.

Indra Mohan

Indra Mohan

Executive Advisor

Startup founder and technology leader with multiple ventures and acquisitions across AI and cloud.

Get started

See it on your own matters.

Fifteen minutes, screen shared, using a case that looks like yours. We'll tell you honestly whether it fits — including when it doesn't yet.

No sales sequence. A reply within one business day, from an engineer.